Security Updates for Microsoft Visio Products (February 2024)

The Microsoft Visio Products are missing a security update. They are, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instead...

Security Updates for Microsoft PowerPoint Products (February 2024)

The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has instea...

Security Updates for Microsoft Word Products (February 2024)

The Microsoft Word Products are missing security updates. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...

Google Chrome < 121.0.6167.160 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 121.0.6167.160. It is, therefore, affected by multiple vulnerabilities as referenced in the 202402stable-channel-update-for-desktop advisory. - Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a...

Cisco Unity Connection Arbitrary File Upload (cisco-sa-cuc-unauth-afu-FROYsCsD)

According to its self-reported version, Cisco Unity Connection running on the report host is affected by an Arbitrary File Upload Vulnerability. Due to lack of authentication in a specific API and improper validation of user-supplied data, an unauthenticated, remote attacker can store malicious...

Citrix Virtual Apps and Desktops RCE (CTX583930)

The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is affected by a remote code execution vulnerability. A remote, authenticated attacker must possess admin privileges to the Session Recording server, if exploited, may result in an authenticated user being able t...

Security Updates for Microsoft SharePoint Server 2016 (January 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing a security update. It is, therefore, affected by A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 70300 C Tenable,...

KB5034134: Windows 10 LTS 1507 Security Update (January 2024)

The remote Windows host is missing security update 5034134. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2024-20654 - BitLocker Security Feature Bypass Vulnerability CVE-2024-20666 - Windows Kerberos Security Feature Bypass...

Google Chrome < 120.0.6099.129 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 120.0.6099.129. It is, therefore, affected by a vulnerability as referenced in the 202312stable-channel-update-for-desktop20 advisory. - Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a...

TeamCity Server < 2023.11.1 CSRF

According to its self-reported version number, the version of JetBrains TeamCity running on the remote host is a version prior to 2023.11.1. It is, therefore, affected by a cross-site request forgery vulnerabilty. Note that Nessus did not actually test for these issues, but instead has relied on...

Security Updates for Microsoft Word Products C2R (December 2023)

The Microsoft Word application installed on the remote host is missing a security update. It is, therefore, affected by an information disclosure vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

IBM Informix Dynamic Server 12.10.x, 14.10.x Buffer Overflow (7070188)

The version of IBM Informix Dynamic Server installed on the remote is either 12.10.x or 14.10.x prior to 14.10.FC10W1. It is, therefore, affected by a buffer overflow, caused by improper bounds checking. A local privileged user could overflow a buffer and execute arbitrary code on the system or...

Apple TV < 17.1 Multiple Vulnerabilities (HT213987)

According to its banner, the version of Apple TV on the remote device is prior to 17.1. It is therefore affected by multiple vulnerabilities as described in the HT213987 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid186414; scriptversion"1.3";...

Security Updates for Microsoft Dynamics 365 (on-premises) (KB5032298) (November 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

Security Updates for Microsoft Dynamics 365 (on-premises) (KB5032297) (November 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...

Security Updates for Microsoft SharePoint Server 2016 (November 2023)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Security Updates for Microsoft SharePoint Server Subscription Edition (November 2023)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized...

Rocky Linux 9 : nginx:1.22 (RLSA-2023:6120)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:6120 advisory. - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wil...

IBM WebSphere Application Server Liberty 23.0.0.9 < 23.0.0.11 Security Weakness (7058356)

The IBM WebSphere Application Server Liberty running on the remote host is 23.0.0.9 prior to 23.0.0.11. It may, therefore, provide weaker than expected security due to improper resource expiration handling. Note that Nessus has not tested for this issue but has instead relied only on the...

Multiple Cisco Products Snort 3 Access Control Policy Bypass (cisco-sa-ftd-snort3acp-bypass-3bdR2BEh)

According to its self-reported version, Cisco ASA Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...